Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-15473 PoC — OpenSSH 竞争条件问题漏洞

Source
https://github.com/trimstray/massh-enum
Associated Vulnerability
Title:OpenSSH 竞争条件问题漏洞 (CVE-2018-15473)
Description:OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Description
OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).
File Snapshot

 [4.0K]  /data/pocs/4330d3b10a7dc07e5252cf17f172ce379f6f1ca7
├── [4.0K]  bin
│   └── [ 14K]  massh-enum
├── [4.0K]  lib
│   └── [2.6K]  init.py
├── [ 34K]  LICENSE.md
├── [1.3K]  README
└── [4.0K]  wordlists
    └── [  76]  users

3 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →